A fresh batch of malicious PDFs is making the rounds via email, with the attackers trying to trick users into opening the files by making them look like instructions for an update to their email accounts. The difference this time, however, is that the attack uses a technique recently published by a researcher that takes advantage of the /launch command in Adobe software.
A security researcher has discovered that any wireless network can
pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting
iPhone users to an untrusted network connection. Read the full article. [CNet]
A new variant of the Storm worm has emerged, but it does not appear to
be as well-designed as its older relative, according to computer
security researchers. Read the full article. [IDG News Service]
Researchers from North Carolina State University have developed new
techniques and software that may be the key to resolving cloud computing and virtualization security
concerns and boosting confidence in the sector. Read the full article. [ScienceDaily]
Microsoft has re-released a security update targeting a vulnerability on Windows 2000 Server.The company pulled support for MS10-025 last week. Read the full article. [eWEEK]
In this video, Lenny Zeltser, a SANS instructor, outlines the basic concepts of reverse engineering malware, describing the process of analyzing the code and the behavior of the malware.
Security watcherssay they’ve spotted a new botnet that bears the
hallmarks of Storm and is sending out a “massive volume of spam emails
to targeted recipients.” Read the full article. [The Register]
Researchers offered a peak into the new variants of the Trojan and the changes that
will assure its longevity for a good while. Read the full article. [Help Net Security]
In a report being released today, Google said that between January 2009
and the end of January 2010 it found
some 11,000 malicious or hacked Web pages that attempted to foist fake
anti-virus on visitors. Read the full article. [KrebsonSecurity]
The clever hacking of online advertisements has quietly grown into a
multi-million dollar criminal industry showing no signs of slowing. The big losers: online advertisers. Read the full article. [The Last Watchdog]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
